Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/601woq0G6bRHgZYq6P5aib_yr0U.roa
File: 601woq0G6bRHgZYq6P5aib_yr0U.roa (raw, json)
Hash identifier: zFbnDi1TeslzfTffqpTzr03SyO6SPsKzCqasf4NrZVc=
Subject key identifier: EB:4D:70:A2:AD:06:E9:B4:47:81:96:2A:E8:FE:5A:89:BF:F2:AF:45
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 338E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/601woq0G6bRHgZYq6P5aib_yr0U.roa
Signing time: Thu 28 Mar 2024 07:52:07 +0000
ROA not before: Thu 28 Mar 2024 07:52:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.236.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13198 (0x338e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Mar 28 07:52:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EB4D70A2AD06E9B44781962AE8FE5A89BFF2AF45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:e1:88:ee:3f:7e:49:5e:aa:f8:a4:ba:b8:
f9:e5:b0:1a:07:57:3d:7f:e6:36:b6:89:00:ce:29:
12:6a:ab:72:13:1b:e4:42:cb:f3:57:78:51:00:6b:
b1:33:c4:b5:6f:fb:a3:9d:9a:b0:6f:e5:f5:f9:14:
96:e4:88:45:72:06:ed:f6:84:4a:47:28:b3:80:66:
e4:5b:99:97:79:88:89:3c:f1:4e:8b:a8:69:bc:91:
11:34:5a:42:1a:68:bd:bb:76:96:01:06:17:53:50:
6d:4b:99:7f:44:12:b8:01:c1:1d:60:ab:dd:3a:67:
7f:ae:be:32:69:a2:62:c1:70:24:ac:5b:dc:25:b5:
cc:02:d2:61:73:97:16:d7:0f:fb:e1:41:52:32:2c:
8e:f5:a1:15:71:78:2f:21:bf:f6:ab:e0:dd:dd:94:
79:5a:1d:6e:2c:99:fd:81:61:f3:19:2e:a4:1d:1e:
88:3a:92:19:12:28:95:56:f4:d5:1d:ff:c0:0d:5c:
cf:80:00:d0:ab:27:dc:e5:9c:58:95:c8:ed:93:97:
ca:3a:64:da:c0:a1:b2:72:f5:14:95:57:34:83:57:
c7:34:50:46:8d:4b:04:9a:5c:33:1a:04:3b:39:9b:
d6:a9:f1:18:32:84:3e:38:2d:a1:20:64:3b:00:50:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4D:70:A2:AD:06:E9:B4:47:81:96:2A:E8:FE:5A:89:BF:F2:AF:45
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/601woq0G6bRHgZYq6P5aib_yr0U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:67:f3:4f:10:12:f3:5b:64:38:5e:bc:30:de:f9:fa:34:d8:
25:69:1b:21:82:77:b8:e1:2d:d0:13:2b:94:53:45:68:5f:b8:
6c:da:3a:d7:49:31:f1:61:d1:cd:7c:f7:58:0a:37:89:6e:db:
22:60:56:e2:1e:08:06:0c:55:de:87:b3:ed:b4:2b:73:b6:d6:
5b:2d:eb:66:47:65:76:ca:53:6b:d6:e7:9a:ae:e7:2e:f1:b2:
53:e9:84:cc:3f:5b:db:17:8d:4f:c1:59:ba:1b:4a:c5:e7:2e:
4d:27:80:d2:a4:c2:6d:5f:82:43:98:04:df:f9:e1:73:d1:a5:
9c:98:07:f1:45:74:04:dd:5d:c6:66:2d:fb:fc:b1:71:3c:0c:
50:20:de:08:3b:4a:63:5e:5b:b3:73:7f:fb:5d:e8:15:23:a9:
aa:de:49:f6:25:53:a7:b9:01:7e:1a:02:54:48:4e:27:b9:4c:
e4:20:28:60:98:d9:23:17:86:c9:05:a0:26:40:6c:6a:b8:a9:
a6:08:da:07:0e:1d:ed:8b:2d:73:3f:f5:c9:82:e8:de:7f:92:
4c:05:93:0b:05:ab:e9:92:df:2c:db:22:27:92:29:a8:e9:a2:
60:2b:d6:85:e6:a7:7c:9f:12:82:8c:b4:71:47:f1:aa:53:0b:
87:dd:ea:64
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICM44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkRF
QkVEODY0MENCQTY1OTNEQTlGOUEzREQyMjhEMzg5MTI0NThFQTAeFw0yNDAzMjgw
NzUyMDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVCNEQ3MEEyQUQwNkU5
QjQ0NzgxOTYyQUU4RkU1QTg5QkZGMkFGNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2duGI7j9+SV6q+KS6uPnlsBoHVz1/5ja2iQDOKRJqq3ITG+RC
y/NXeFEAa7EzxLVv+6OdmrBv5fX5FJbkiEVyBu32hEpHKLOAZuRbmZd5iIk88U6L
qGm8kRE0WkIaaL27dpYBBhdTUG1LmX9EErgBwR1gq906Z3+uvjJpomLBcCSsW9wl
tcwC0mFzlxbXD/vhQVIyLI71oRVxeC8hv/ar4N3dlHlaHW4smf2BYfMZLqQdHog6
khkSKJVW9NUd/8ANXM+AANCrJ9zlnFiVyO2Tl8o6ZNrAobJy9RSVVzSDV8c0UEaN
SwSaXDMaBDs5m9ap8RgyhD44LaEgZDsAUJb9AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU601woq0G6bRHgZYq6P5aib/yr0UwHwYDVR0jBBgwFoAUvevthkDLplk9qfmj
3SKNOJEkWOowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3
L3ZldnRoa0RMcGxrOXFmbWozU0tOT0pFa1dPby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvdmV2dGhrRExwbGs5cWZtajNTS05PSkVrV09vLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTM3LzYwMXdvcTBHNmJSSGda
WXE2UDVhaWJfeXIwVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwAr7DANBgkqhkiG9w0BAQsFAAOCAQEAYGfzTxAS81tkOF68MN75+jTYJWkbIYJ3
uOEt0BMrlFNFaF+4bNo610kx8WHRzXz3WAo3iW7bImBW4h4IBgxV3oez7bQrc7bW
Wy3rZkdldspTa9bnmq7nLvGyU+mEzD9b2xeNT8FZuhtKxecuTSeA0qTCbV+CQ5gE
3/nhc9GlnJgH8UV0BN1dxmYt+/yxcTwMUCDeCDtKY15bs3N/+13oFSOpqt5J9iVT
p7kBfhoCVEhOJ7lM5CAoYJjZIxeGyQWgJkBsarippgjaBw4d7Ystcz/1yYLo3n+S
TAWTCwWr6ZLfLNsiJ5IpqOmiYCvWheanfJ8Sgoy0cUfxqlMLh93qZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:07 2024 by rpki-client on console-fra.rpki-client.org